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REMOTE APPLICATION CORRECTION 

DESCRIPTION 
Technical field 

This invention deals with a method to correct data in a data processing 
system remotely. The example chosen to illustrate the invention is that of the 
smartcard, particularly a SIM (Subscriber Identity Module) card coupled to a 
Portable object (Mobile phone, PDA, etc.). 

Generally, this invention can be applied to all the smart card industry 
and not only the GSM (Global System for Mobile Communication) industry. 
That means for all other smart cards product with an Over The Air system or 
any smart card product with a remote system management. 

The invention will be very useful to new business proposals regarding 
maintenance system. 

Prior art 

GSM SIM Card manufacturers face a big issue when they have to deal 
with defect corrections on cards that are already on the field. They provide 
from thousands up to millions of card to Telecommunications operators. They 
also provide various kinds of applications with various level of complexity. 

Sometimes, even after a long integration and validation phase, a 
problem is discovered on some of these applications when they are already on 
the field. 

A correction of these defects is very painful for the Telecommunication 
operators and Card manufacturer industry. Because they have to deal with a 
huge number of cards, it will always cost a lot of money to correct the defects, 
even if the problem is minor. In many situations, the cost is so prohibitive that 
no correction can be done. 

A smart card is based on a chip. In the heart of this chip, more 
particularly in a ROM (Read Only Memory), Card manufacturers put their 
operating system called "hardmask", and load their applications on a 
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EEPROM (Electrically Erasable programmable Read Only Memory). These 
applications can be a mix of "softmask" and applets. 

A mask is a software dedicated for a smart card microcontroller. 

Once the applications are loaded on the card and when the 
5 personalization is done, the card is locked. At that time no more softmask 

applications can be downloaded. With a Java smartcard it is possible to 
download another applet but the previous one has to be deleted entirely. 
Cards are released on the field and no further correction can be done. Only 
smartcard file system management (creation or deletion) is possible with the 
10 Over The Air services. 



Summary of the Invention 

The goal of the invention is to simplify correction of applications. More 
particularly, a goal is to reduce cost in time and in money of such correction, 
is According to the invention, the smartcard comprises a location for 

storing a file downloaded from a remote entity; the smartcard also comprises a 
program for performing the following steps: 

- Before performing data correction in the system, a checking step in 
which said program (GS) checks whether a file (F) has been downloaded, 
20 - If such a file (F) is present, the program (GS) modifies the application 

(APP) on the basis of the data stored in the file (F). 

Said program will be able to allow a remote correction. The cards will 
neither be retrieved from the field nor replaced. This will ease the pain for Card 
25 manufacturer and decreased significantly the cost of a correction. 

It will be easier to understand the invention on reading the description 
below, given as an example and referring to the attached drawings. 



30 In the drawings: 

- Fig 1 is a general view of a system in which can be applied the 
invention. 
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- Fig 2 is an algorithm including different steps illustrating the 
invention. 

Detailed description of examples illustrating the invention 

To simplify the description, the same elements illustrated in the 
drawings have the same references. 

Figure 1 is a schematic view of a system in which the invention can be 
applied. This system comprises a SIM card CAR coupled to a mobile phone 
MOB; An application APP is stored oh the SIM card. 

A smartcard includes an electronic module (not shown). The module 
includes a microcontroller and contacts to communicate with the exterior. The 
microcontroller generally includes: 

- a microprocessor to execute commands, 

- non volatile memories ROM (Read Only Memory), whose content is 
burnt in the factory and therefore cannot be modified. This memory is 
generally used to store hardmasks; 

- non volatile memories, for example EEPROM (electrically erasable 
programmable read only memory). This memory is generally used to 
store softmasks; 

- volatile memories RAM, work space to execute the card commands, 

- security units, taking into consideration the power supply voltage, 
clock speed, etc., 

- a data bus connecting everything, 

- an input-output bus to communicate, in our example of realisation, 
with the mobile phone MOB. 

In our illustrated invention, a telecommunication operator OP 
communicates with the mobile phone MOB by way of a network NET. 

The aim is to update an application APP stored in the card CAR. 
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According to the invention, the SIM card includes a program GS and a 
location for storing a file F which can be downloaded from the network into the 
card. 

Figure 1 illustrates an example in which a file F has been downloaded 
5 from the operator into the card CAR. In this example, under a dedicated file 

DF or a master file MF, a File F with a specific ID (Identifier) and, preferably, 
with a specific format, will contain the fixing configuration data. 

The ID can be chosen at the personalization or be set during the 
project life, depending on the requirements or the evolution of the project. 
10 This file F can be created at any time during the card life, i.e. during the 

personalisation or, better, while the card is on the field. Since it is a file, this 
can be done easily thanks to current Over The Air (OTA) services. 

The program GS performs the following steps: 

- A checking-step in which it checks whether a downloaded file F is 
present on the data processing system; the program (GS) searches for 
this identifier (ID) for performing a modification of the application (APP). 

- If such a file is present, a modification step in which the program GS 
modifies the application on the basis of the data stored in the said file F. 

In our example, the program GS is run during the initialisation phase of 
the card. Preferably, the program GS will be totally executed once and only 
once. The execution will happen only if fixing configuration data included in a 
file F are downloaded and stored on the card. If not, the execution will not be 
performed. 

Advantageously, this file F will contains data formatted in such a way 
that it will be interpreted correctly by the program GS. Automatically, the 
current application APP stored in the SIM card with a previous behaviour will 
be replaced with a new one behaviour described in the downloaded file. 

Figure 2 is an algorithm including different steps illustrating the 
invention. 



20 



25 
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Considering that it exists a new release of the application APP. For 
example, the new application includes new APDU (Application Protocol Data 
Unit) commands. A new softmask (after being fully tested) is re-shaped into a 
fixing configuration data file F. Once the fixing configuration data file F is 
5 created, this one is downloaded, in our example, by way of an Over The Air 

(OTA) service, from the operator entity into the card CAR. In our example, as 
mentioned above, the program GS is executed during initialisation. So, next 
time the mobile phone is switched on, the modification is taken into account. 



io The steps of the an example illustrating the invention can be the 

fallowings: 

Step 1 (S1) 

The mobile phone is switched on. 

15 

Step 2 (S2) 

The program GS checks whether a file F with a specific ID is stored in 
the card. If yes, step 3 is performed; if not, the correction is not performed. 



20 Step 3 (S3) 

In our example, the program GS checks whether this file F is activated. 
In other words, after the program (GS) has found the identifier (ID), it 
also checks whether the file (F) is activated or deactivated; if the file is 
activated, the program (GS) performs the modification (step 4); if the file 

25 is deactivated, the program (GS) doesn't perform the modification. 

Step 4 (S4) 

In our example, advantageously, the program GS checks the type of 
the correction. If the correction consists in data modification, it performs step 
30 5A; if it consists in a code substitution mechanism, it performs steps 5B&6B. 



Step 5A (S5) 
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Data are modified. 
Step 5B (S5B) 

The program GS searches for the entry point to use in the fixing 
5 configuration file F. 

Step 6B (S6B) 
Data are substituted. 

10 Step 7 (S7) 

Advantageously, after performing the correction, the program GS 
deactivates and deletes the configuration file F. 

Step 8 (S8) 

15 The correction process is finished. 

In our example, in reference to figure 1A and 1B, the program GS is 
run at card initialisation. Nevertheless, we could run it at any time, for 
example, at successful reception of a SMS (Short Message Service) 
20 preferably protected with a 03.48 security layer and a end-to-end encryption 

for more security. This program could also run when a configuration zone has 
been updated in the card CAR. 

In our embodiment, the program GS detects that a configuration zone 
25 exists if it finds the header of this zone in the EEPROM memory. The program 

also detects that the zone is activated, for example, if inside its header an 
activated parameter is set. 

In our example, two types of corrections can be done: data or code 
30 correction. A data correction means application data have to be changed but 

not the application itself. A code correction means the current code of the 
application has to be modified. 
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More specifically, for a data, modification, in the configuration zone, the 
exact address in the EEPROM, the new content and its size have to be stored. 
With these parameters the program GS proceed to the modification. 
5 For a code modification, in the configuration zone, the address of the 

previous code in the EEPROM (entry point), the new code content and its size 
have to be stored. First of all, the program GS deactivates the previous code 
and then proceeds to the code substitution. 

10 A Configuration zone could be a file formatted as an EEPROM area 

non directly reachable. This configuration zones could comprise the following 
parts: 

- A header including a standard header zone and a security parameter 
zone; 

15 - A configuration body zone, which contains specific data such as 

number of corrections, types of correction, and for each correction 
the associated data. 

20 The invention also concerns a computer program (GS) stored in the card 

CAR comprising code instructions for performing the following steps: 

o Before performing data correction in said system, it checks 
whether a file (F) has been downloaded into said system 
(CAR), 

25 o If yes, it modifies the application (APP) on the basis of the 

data stored in the file (F). 

We now see that this invention offers other clear advantages. The 
invention allows a remote modification of applications, in particular correction 
30 of errors. The smart card does not have to be physically returned to a centre 

for making the modification correction. 
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The program GS is preferably a softmask. This program GS is a 
generic application remote bug correction system with the above-identified 
constraints (locked cards, Over The Air services) taken into account. This 
program will depend on the hardmask (because it will refer to the memory 

5 mapping done by the product line group when the hardmask is implemented). 

This program GS can also be implemented on the hardmask side and become 
a product feature that may or may not be activated. This program GS will be 
part of any new applications that will be released (it can also be an option 
chosen by the customer as a guarantee to solve unknown problems that may 

10 occur after the global application validation). 

With this program GS and a file F as defined above, depending on the 
complexity level of the modification and the available size on the card, it will be 
possible to modify, to change the behaviour of an application APP already on 
15 the field. The modification will be transparent to the end-user. And it will be 

very easy for any Telecommunication operators to do it. 

After an analysis of the problem by the operator or the card 
manufacturer and a feasibility study of the defect fixing, it will be possible for 
20 example to say if the problem can be corrected remotely. If it is, the card 

manufacturer can provide fixing configuration data to the Telecommunication 
operators, and they can be sent to the cards with, for example, a basic Over 
The Air service. 

25 This softmask is by itself a value-added service. 
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CLAIMS 

1. A data processing system (CAR), particularly a smart card coupled to 
a communication device (MOB), communicating with a remote entity 
(OP), characterized in that said system comprises: 

- A location for storing a file (F) which can be downloaded from said 
remote entity; 

- A program (GS) for performing the following steps: 

o Before performing data correction in the system, a checking 
step in which said program (GS) checks whether a file (F) has 
been downloaded, 

o If such a file (F) is present, the program (GS) modifies the 
application (APP) on the basis of the data stored in the file (F). 

2. A method for updating an application (APP) stored in a memory of a 
data processing system (CAR), in particular a smart card coupled to a 
communication device (MOB), said system being able to communicate 
with a remote entity (OP), characterized in that it comprises the following 
steps: 

- Before performing data correction, a program (GS) stored inside the 
data processing system checks whether a file (F) has been 
downloaded from said entity into said data processing system, 

- If such a file (F) is present, said program (GS) modifies the 
application (APP) on the basis of the data stored in said downloaded 
file (F). 

3. The method according to claim 2, characterized in that, when said 
program (GS) modifies an application (APP) on the basis of the data 
stored in the file (F), the program (GS) writes the new code or data and 
deactivates the previous one. 
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4. The method according to claim 2, characterized in that said file (F) 
has a predetermined identifier (ID), and in that the program (GS) 
searches for this identifier (ID) for performing a modification of the 
application (APP). 

5. The method according to claim 4, characterized in that, after the 
program (GS) has found the identifier (ID), it also checks whether the file 
(F) is activated or deactivated; if the file is activated, the program (GS) 
performs the modification; if the file is deactivated, the program (GS) 
doesn't perform the modification. 

6. Computer program (GS) stored in a data processing system (CAR), in 
particular a smart card coupled to a communication device (CAR), said 
system (CAR) including a microcontroller comprising code instructions 
for performing the following steps: 

o Before performing data correction in said system, it checks 
whether a file (F) has been downloaded into said system 
(CAR), 

o If yes, it modifies the application (APP) on the basis of the 
data stored in the file (F). 
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